silverstripe/userforms vulnerabilities

CVEs whose affected-version data names the silverstripe/userforms package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54721High· 8.8

1mo ago

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted a…

▾ Twilightsilverstripe · silverstripe/userformsEPSS 0.73%via NVD